Security audit

Language Coach

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed language-proofreading skill with no requested permissions, persistence, or external data flow.

Installers should understand that phrases like "check my English:" or "review this French:" may invoke proofreading, and responses may be in the target language. The skill does not appear to access files, credentials, networks, or persistent memory.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The alternative trigger phrases like "check my [language]:" or "review this [language]:" are broad natural-language patterns that can appear in ordinary conversation, increasing the chance the skill activates when the user did not intend to invoke it. This can cause unintended processing of user text and surprising behavior, especially because the skill is configured for command dispatch with raw arguments and handles free-form input.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description and instructions explicitly require explanations and corrections to be provided in English. This is a natural-language locale constraint, and the file does not offer the user a language choice or explain a policy-based reason for enforcing English output.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The description and response instructions explicitly require explanations in French and define the output format using French-only text. This is a natural-language locale restriction with no opt-in or justification, which conflicts with the policy requirement to avoid forcing a specific language unless documented or user-selected.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Medium

Category: Not specified by scanner
Confidence: 97% confidence
Finding: The description and instructions require the skill to explain corrections in Japanese and provide concise output in Japanese, with no indication that the user can choose another language. This is a natural-language policy issue because it imposes a specific language/locale behavior without explicit opt-in or documented justification.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 91% confidence
Finding: The description and instructions require the skill to respond in Chinese/Mandarin only, with no option for the user to choose another language. This is a natural-language locale policy constraint and is not presented as an explicit user opt-in within the file.
Content: No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

Category: Not specified by scanner
Confidence: 90% confidence
Finding: The description and instructions require the skill to explain in Spanish and review Spanish text, without offering the user a language-choice or opt-in. This is a natural-language locale policy concern because it mandates a specific language rather than allowing user preference.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.